$ rpki-client -vvf rpki-rsync.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A.mft File: AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A.mft (raw, json) Hash identifier: 3V04nfVJbBPyvNiGbMf6ku5Tboe1l164aheUnNJ4/NY= Subject key identifier: BA:FE:85:B5:51:EA:09:94:65:D5:71:12:18:CB:B9:CF:96:2D:37:46 Authority key identifier: AF:10:C2:E9:04:0A:DB:1F:41:C5:AB:C9:FF:FD:E5:7E:12:09:D7:7A Certificate issuer: /CN=AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A Certificate serial: 4C2E8CD49052985C5C8DEFE4445BD987F2FB9E67 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A.mft Manifest number: 3D Signing time: Wed 17 Jun 2026 04:28:13 +0000 Manifest this update: Wed 17 Jun 2026 04:23:13 +0000 Manifest next update: Thu 18 Jun 2026 06:18:13 +0000 Files and hashes: 1: AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A.crl (hash: JLGAFOvYmKt2CSAqxBMvysw9I6jUbaJAxzQu1IdUSgA=) 2: 3130332e3133392e39382e302f32332d3234203d3e20313338383632.roa (hash: d37ZeGgHjVZzYq6CUddv0o+w23L0QGAKsBmc8dpggDQ=) 3: 323430343a653134303a3a2f33322d3438203d3e20313338383632.roa (hash: B4j0qT4PT3YdDkrmlfhYyZnafUYLOfUdcba19kZ7mRY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A.crl rsync://rpki-rsync.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:2e:8c:d4:90:52:98:5c:5c:8d:ef:e4:44:5b:d9:87:f2:fb:9e:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A Validity Not Before: Jun 17 04:23:13 2026 GMT Not After : Jun 18 06:18:13 2026 GMT Subject: CN=BAFE85B551EA099465D5711218CBB9CF962D3746 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:56:d2:de:e8:20:f8:41:89:7e:b3:5e:bd:e2: 9b:bb:7e:33:ac:8f:7b:4c:49:22:e8:69:d5:ce:0b: e8:45:ca:d5:19:56:ff:c6:5a:46:01:fc:84:e0:fc: 6d:09:1c:5f:2f:91:7d:5b:53:44:5d:b6:d8:98:8d: 1f:2b:aa:68:cf:1d:0c:3a:54:35:ed:f6:3b:37:28: 64:4c:06:ef:b7:5c:72:5f:62:d4:92:c3:ff:09:22: 5e:c1:cd:99:db:b9:4f:dc:cf:99:60:e2:8e:39:36: 17:d9:4b:bb:59:46:89:19:d5:04:b9:d0:17:bb:bb: 7a:ae:26:23:c9:05:e3:f7:c5:02:4e:43:2b:38:af: 3b:19:83:25:71:fc:de:cc:f3:58:f8:17:a2:a5:11: d0:49:36:f5:d3:cc:b6:49:af:f7:ca:74:87:66:6a: 1d:0b:38:8f:39:2a:85:c8:e7:7d:ba:55:1f:14:d3: 21:7b:9f:dc:76:92:a1:84:07:e9:0e:5b:10:e5:a2: 2b:46:cb:f9:b5:dc:6b:2b:1a:ef:e4:d7:34:08:3f: 70:c4:9e:88:8c:34:03:41:7a:8b:54:be:7b:6a:17: 3a:77:94:57:15:f7:7f:f1:45:db:6e:11:ca:29:aa: f3:dc:8b:be:29:25:12:9d:66:62:6c:ec:db:6a:53: b6:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:FE:85:B5:51:EA:09:94:65:D5:71:12:18:CB:B9:CF:96:2D:37:46 X509v3 Authority Key Identifier: keyid:AF:10:C2:E9:04:0A:DB:1F:41:C5:AB:C9:FF:FD:E5:7E:12:09:D7:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/450633fc-fe23-4d82-ba64-bb7ee6dd6e06/0/AF10C2E9040ADB1F41C5ABC9FFFDE57E1209D77A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:59:a8:1f:8b:d7:20:8c:b0:0a:a5:29:25:9f:fa:bb:39:41: a2:5a:33:15:85:21:d4:3e:03:4c:c2:b6:af:71:30:8b:15:e7: 41:30:41:9e:fc:cc:e0:d1:fd:62:e2:61:66:7d:7e:93:2a:8a: b7:44:2e:cc:d2:76:3d:01:fa:9a:43:29:25:75:cc:8d:79:97: 90:74:01:ee:43:8b:69:2b:d6:f2:c7:50:33:88:a9:c3:80:f7: d1:49:2c:24:34:30:67:a5:f9:1c:cc:3b:99:55:b7:18:2d:d0: 01:9b:a4:18:06:aa:d0:bd:25:f3:bd:6f:5a:55:c5:3b:68:c2: 5c:da:8e:ec:9f:43:6f:ce:d6:35:6a:cd:a8:87:89:5d:18:bf: 15:04:82:44:b2:cf:40:98:7e:45:bd:0b:f2:03:b0:ef:7a:f6: 92:20:22:42:1a:9f:9c:6f:5b:66:52:03:f6:3e:d5:98:67:81: 7a:39:aa:89:86:c8:c8:bf:59:04:fd:a5:0e:e7:97:6c:c4:3a: aa:1b:ba:02:47:d8:a1:04:36:5e:97:a7:2b:49:c5:0e:e0:9d: 77:41:fa:8f:84:e6:a5:8b:f0:ff:39:af:fa:13:c1:d3:a5:5d: 92:31:62:24:af:66:17:b0:7a:e7:f5:ac:8e:ce:9e:87:51:8f: 98:57:a6:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTC6M1JBSmFxcje/kRFvZh/L7nmcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUYxMEMyRTkwNDBBREIxRjQxQzVBQkM5RkZGREU1N0Ux MjA5RDc3QTAeFw0yNjA2MTcwNDIzMTNaFw0yNjA2MTgwNjE4MTNaMDMxMTAvBgNV BAMTKEJBRkU4NUI1NTFFQTA5OTQ2NUQ1NzExMjE4Q0JCOUNGOTYyRDM3NDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdVtLe6CD4QYl+s1694pu7fjOs j3tMSSLoadXOC+hFytUZVv/GWkYB/ITg/G0JHF8vkX1bU0RdttiYjR8rqmjPHQw6 VDXt9js3KGRMBu+3XHJfYtSSw/8JIl7BzZnbuU/cz5lg4o45NhfZS7tZRokZ1QS5 0Be7u3quJiPJBeP3xQJOQys4rzsZgyVx/N7M81j4F6KlEdBJNvXTzLZJr/fKdIdm ah0LOI85KoXI5326VR8U0yF7n9x2kqGEB+kOWxDloitGy/m13GsrGu/k1zQIP3DE noiMNANBeotUvntqFzp3lFcV93/xRdtuEcopqvPci74pJRKdZmJs7NtqU7aVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuv6FtVHqCZRl1XESGMu5z5YtN0YwHwYDVR0j BBgwFoAUrxDC6QQK2x9BxavJ//3lfhIJ13owDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDUwNjMzZmMtZmUyMy00ZDgyLWJhNjQtYmI3ZWU2ZGQ2ZTA2LzAvQUYxMEMyRTkw NDBBREIxRjQxQzVBQkM5RkZGREU1N0UxMjA5RDc3QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRjEwQzJFOTA0MEFEQjFGNDFDNUFCQzlGRkZERTU3RTEyMDlE NzdBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDUwNjMzZmMtZmUyMy00ZDgyLWJh NjQtYmI3ZWU2ZGQ2ZTA2LzAvQUYxMEMyRTkwNDBBREIxRjQxQzVBQkM5RkZGREU1 N0UxMjA5RDc3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADZZqB+L1yCMsAqlKSWf+rs5QaJaMxWFIdQ+ A0zCtq9xMIsV50EwQZ78zODR/WLiYWZ9fpMqirdELszSdj0B+ppDKSV1zI15l5B0 Ae5Di2kr1vLHUDOIqcOA99FJLCQ0MGel+RzMO5lVtxgt0AGbpBgGqtC9JfO9b1pV xTtowlzajuyfQ2/O1jVqzaiHiV0YvxUEgkSyz0CYfkW9C/IDsO969pIgIkIan5xv W2ZSA/Y+1ZhngXo5qomGyMi/WQT9pQ7nl2zEOqobugJH2KEENl6XpytJxQ7gnXdB +o+E5qWL8P85r/oTwdOlXZIxYiSvZheweuf1rI7OnodRj5hXpoQ= -----END CERTIFICATE-----Generated at Wed Jun 17 09:42:31 2026 by rpki-client